This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e3131332e36342e302f32342d3234203d3e203437353833.roa File: 3139342e3131332e36342e302f32342d3234203d3e203437353833.roa (raw, json) Hash identifier: BXqEcCnkbCWovbmNW1wh7o+icpliPEEMLI9b4WSgIQI= Subject key identifier: FA:BF:5D:1F:FA:45:23:BB:7B:3F:89:33:4B:42:0A:86:02:6E:F6:C4 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 205A7022999019B8CC7C6DDB991F9DBC2481E2D1 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e3131332e36342e302f32342d3234203d3e203437353833.roa Signing time: Fri 28 Nov 2025 11:49:32 +0000 ROA not before: Fri 28 Nov 2025 11:44:32 +0000 ROA not after: Fri 27 Nov 2026 11:49:32 +0000 asID: 47583 IP address blocks: 194.113.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 11:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:5a:70:22:99:90:19:b8:cc:7c:6d:db:99:1f:9d:bc:24:81:e2:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:32 2025 GMT Not After : Nov 27 11:49:32 2026 GMT Subject: CN=FABF5D1FFA4523BB7B3F89334B420A86026EF6C4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:94:c1:04:a1:e4:1c:40:19:84:e1:26:43:6e: b1:03:1b:24:d0:fe:9a:9c:be:2b:3a:e6:cd:a5:55: 0c:e5:99:42:78:63:14:b7:9e:9d:39:44:1a:3c:4f: b4:2c:41:f4:14:01:04:72:c6:3a:6f:3f:66:b9:d3: a9:6a:be:86:5c:f9:42:d2:12:96:9d:b5:c8:32:8e: 45:df:b4:5d:6e:ed:d9:b1:a7:1a:61:8d:14:a9:0a: 7e:66:c7:2e:63:3c:7d:23:4a:08:64:bf:68:17:86: f3:f7:d5:8b:f1:db:fc:0f:be:3f:28:19:0f:94:d8: ff:43:15:de:e6:c4:a6:c7:de:d4:e1:14:20:9f:6a: bc:8a:31:13:b2:fb:91:79:96:d6:2d:57:1c:2c:40: 2c:22:58:f4:a1:4a:79:f8:c2:e4:ec:4f:38:95:2f: 77:a3:d9:fe:c6:5b:2b:07:f3:fd:14:dc:9e:7e:65: e4:d3:0e:ba:b8:c7:7a:d4:12:ea:83:dd:04:f6:d3: 32:2c:c3:0a:9a:f0:9e:94:70:70:db:41:e8:84:37: e9:32:a6:25:a0:a6:af:ac:32:9b:21:f5:06:18:f6: e2:35:68:7b:20:ca:4c:ba:99:93:62:c7:0f:bd:48: da:e1:d0:1a:2f:49:25:e2:44:b7:5d:fd:2e:e3:05: 27:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:BF:5D:1F:FA:45:23:BB:7B:3F:89:33:4B:42:0A:86:02:6E:F6:C4 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e3131332e36342e302f32342d3234203d3e203437353833.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.113.64.0/24 Signature Algorithm: sha256WithRSAEncryption cb:7d:e3:10:50:08:30:48:dc:bb:29:21:60:49:33:97:6c:96: c2:23:8f:bb:9f:8a:00:09:9b:e6:69:a3:a4:f3:69:ed:ec:ab: 25:bb:9f:af:75:16:2a:e4:14:5c:5f:da:b3:34:5f:28:81:60: 4c:63:2c:df:a5:cb:39:62:78:d6:05:97:8a:e1:ea:64:ba:c3: 16:1a:98:14:b8:17:91:a1:a7:1d:88:21:ba:7d:84:fe:7c:e2: 9c:b1:59:03:d9:ae:57:63:2e:06:f3:0c:ad:de:94:f6:5d:76: 6f:d1:31:1c:eb:25:a0:c7:3f:c4:b9:04:2e:4b:1b:5d:79:16: 3f:e8:1e:74:4c:67:72:79:7a:87:c2:f2:59:fe:e0:d5:77:cb: 85:47:0d:4c:39:b3:5e:94:24:e0:1d:31:ec:c4:55:f0:36:da: a5:1b:d6:4e:75:2a:c6:52:c3:db:b0:5a:21:bb:01:7e:9f:dc: 15:44:7f:3a:4e:08:0d:1c:01:4b:1d:38:6b:97:3e:f8:be:a5: 20:19:5e:9e:7a:d2:f4:30:0b:8f:66:ae:03:78:da:ac:05:46: a3:ec:31:ad:22:c7:ba:7b:89:a5:3e:16:e0:16:e0:d9:85:2f: 76:e8:45:26:d9:38:0c:ac:68:6a:75:ca:ad:fe:a8:27:4e:af: 67:9c:96:4a -----BEGIN CERTIFICATE----- MIIFODCCBCCgAwIBAgIUIFpwIpmQGbjMfG3bmR+dvCSB4tEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0MzJaFw0yNjExMjcxMTQ5MzJaMDMxMTAvBgNV BAMTKEZBQkY1RDFGRkE0NTIzQkI3QjNGODkzMzRCNDIwQTg2MDI2RUY2QzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAlMEEoeQcQBmE4SZDbrEDGyTQ /pqcvis65s2lVQzlmUJ4YxS3np05RBo8T7QsQfQUAQRyxjpvP2a506lqvoZc+ULS EpadtcgyjkXftF1u7dmxpxphjRSpCn5mxy5jPH0jSghkv2gXhvP31Yvx2/wPvj8o GQ+U2P9DFd7mxKbH3tThFCCfaryKMROy+5F5ltYtVxwsQCwiWPShSnn4wuTsTziV L3ej2f7GWysH8/0U3J5+ZeTTDrq4x3rUEuqD3QT20zIswwqa8J6UcHDbQeiEN+ky piWgpq+sMpsh9QYY9uI1aHsgyky6mZNixw+9SNrh0BovSSXiRLdd/S7jBSc3AgMB AAGjggJCMIICPjAdBgNVHQ4EFgQU+r9dH/pFI7t7P4kzS0IKhgJu9sQwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3Jz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMTM5MzQyZTMxMzEz MzJlMzYzNDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM0MzczNTM4MzMucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADCcUAwDQYJKoZIhvcNAQELBQADggEBAMt94xBQCDBI3LspIWBJM5dslsIj j7ufigAJm+Zpo6Tzae3sqyW7n691FirkFFxf2rM0XyiBYExjLN+lyzlieNYFl4rh 6mS6wxYamBS4F5Ghpx2IIbp9hP584pyxWQPZrldjLgbzDK3elPZddm/RMRzrJaDH P8S5BC5LG115Fj/oHnRMZ3J5eofC8ln+4NV3y4VHDUw5s16UJOAdMezEVfA22qUb 1k51KsZSw9uwWiG7AX6f3BVEfzpOCA0cAUsdOGuXPvi+pSAZXp560vQwC49mrgN4 2qwFRqPsMa0ix7p7iaU+FuAW4NmFL3boRSbZOAysaGp1yq3+qCdOr2eclko= -----END CERTIFICATE-----Generated at Fri Dec 5 19:00:26 2025 by rpki-client